RedLegg CTI

2 min read

Emergency Vulnerability Bulletin - 09/30/22

https://www.redlegg.com/hubfs/Theme-2024/overlay-red.png featured image

TABLE OF CONTENTS

By: RedLegg Blog

Atlassian Bitbucket Server and Data Center Vulnerability

Identifier: CVE-2022-36804

Exploit or POC: Yes (Actively Being Exploited)

Update: https://jira.atlassian.com/browse/BSERV-13438

Description: CVE-2022-36804 allows for arbitrary code execution by transmitting malicious HTTP requests. To successfully exploit this vulnerability read permissions to a private or public Bitbucket repository is required.

Mitigation recommendation: Patching is currently the only method of mitigation

RedLegg Action: None at this time.

Similar Blogs

Hands around a Ouija board
Threat Intelligence RedLegg CTI

Summoning Cyber Awareness: Exorcising the Malevolent Realm...

EXECUTIVE SUMMARY RedLegg would like to recognize the efforts instituted by the Cybersecurity &...

Read More
96 Bravo Critical Security Bulletin
RedLegg CTI

Patch Tuesday - August 2023

*Important note: These are not the only vulnerabilities that have been recently released; however,...

Read More
Emergency Security Bulletin | RedLegg | 96Bravo
Threat Intelligence RedLegg CTI

Emergency Security Bulletin - Citrix ADC and Citrix Gateway

About: RedLegg will occasionally communicate vulnerabilities released outside the usual release...

Read More
Connect with Us
(312) 757-4941
Contact Us
©2024, RedLegg | Privacy Policy